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Abstract. Assuming Lang's conjectured lower bound on the heights of 
non-torsion points on an elliptic curve, we show that there exists an absolute 
constant C such that for any elliptic curve E/Q and non-torsion point 
■ P e E(Q), there is at most one integral multiple [n]P such that n > C. 

^vq \ The proof is a modification of a proof of Ingram giving an unconditional but 

not uniform bound. The new ingredient is a collection of explicit formula; 
q for the sequence of valuations of the division polynomials. For P of 

• non-singular reduction, such sequences are already well described in most 

cases, but for P of singular reduction, we are led to define a new class of 
sequences called elliptic troublemaker sequences, which measure the failure 
of the Neron local height to be quadratic. As a corollary in the spirit 
f-H ■ of a conjecture of Lang and Hall, wc obtain a uniform upper bound on 

^ | , h(P) / h(E) for integer points having two large integral multiples. 



1. Introduction 



! A famous theorem of Siegel states that there are only finitely many integral 

\ points on any elliptic curve E/Q. Of course, this implies that among the 

multiples [n]P of any particular point P, only finitely many may be integral. 
In this context there are two natural ways to give a bound: on the number of 
such points; and on the size of n. If one assumes either the abc Conjecture 
of Masser and Oesterle, or Szpiro's Conjecture, and restricts attention only to 
elliptic curves in minimal Weierstrass form, then the number of integral points 
among the multiples of P is bounded uniformly according to work of Hindry 
and Silverman [16]. This is also known unconditionally for curves of integral 
j- invariant [26]. 

The best known result bounding the size of n is due to Ingram [17], who 
uses lower bounds on linear forms in elliptic logarithms to bound n in terms 
of the height of E, and a quantity denoted M(P), depending on P, which is 
related to the Tamagawa number of E and can be bounded above in terms of E 
alone. Using a gap principle, Ingram goes on to find a constant C, depending 
only on M(P) (and not the height of E) such that at most one multiple [n]P 
is integral for n > C. At the moment, analogous results bounding integral 
points among linear combinations [n]P + [m]Q seem to be out of reach. 
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In this paper, we obtain a version of this result in which the constant depends 
only on the ratio of heights h(E)/h(P). See Section 10 for the definitions of 
the heights. 

Theorem 1. There are uniform constants C and C such that for all elliptic 
curves E/Q in minimal Weierstrass form, and non-torsion points P £ E(Q), 
there is at most one value of 

(h(E)\ _,\ 
n > max < C^—^ log , C > 

\ h(P) \h(P)J J 

such that [n]P is integral. Furthermore, this one value is prime. 

The restriction to minimal elliptic curves is necessary, since otherwise there 
exist methods of constructing examples with arbitrarily many integral points. 
The bound becomes uniform if one assumes a well-known conjecture of Lang. 

Lang's Height Conjecture ([20, p. 92]). There is a uniform constant Cl 
such that for any elliptic curve E/Q in minimal Weierstrass form, and point 
P £ E(Q) of infinite order, 

h(P) > C L h(E). 

Lang's conjecture follows from the abc Conjecture, via Szpiro's Conjecture 
[16]. The bound on n in Theorem 1 becomes uniform if we assume any of these 
conjectures. In particular, the bound is uniform if we restrict to elliptic curves 
of integral j-invariant, or curves for which the denominator of the j-invariant 
is divisible by a bounded number of primes, for which Lang's conjecture is 
known to hold [16, 25]. The uniformity of the bound in Theorem 1 in the 
case of integral j-invariant is already a result of Ingram's original argument 
[17] (but this does not extend to curves whose j-invariant is divisible by a 
bounded number of primes). 

Another conjecture of Hall and Lang posits an upper bound on the height 
of an integral point in terms of the height of the curve. 

Hall-Lang Conjecture ([21, Conjecture 5]). There is a uniform constant 
Chl such that for any elliptic curve E/Q in minimal Weierstrass form, and 
integral point P £ E(Q) of infinite order, 

(1) h(P) < C HL h(E). 

This conjecture generalises a conjecture of Hall for elliptic curves of the 
form y 2 = x 3 + b [15]. In [21], Lang used a different definition of h(E) than we 
use here; see Section 10. The conjecture seems out of reach; the best known 
bounds with a uniform constant are exponential in h(E) [2, 24, 32, 34], but 
see also [23]. 

A corollary of Theorem 1 can be seen as progress toward the Hall-Lang 
Conjecture. 

Corollary 2. There are uniform constants c and c' such that for any elliptic 
curve E/Q in minimal Weierstrass form, and integral point P £ E(Q) of 
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infinite order having at least two integral multiples [n]P and [m]P satisfying 
n > m > d , then 



There is another way in which Theorem 1 can be viewed as progress toward 
the Hall-Lang Conjecture. If the form of the bound could be improved to 



In other words, all but one sufficiently large integral multiple of the generator 
of a rank 1 curve would satisfy a Hall-Lang bound. 

Unfortunately, the constants C and C in Theorem 1, while effective, are 
quite large. More details can be found in Section 10. 

Theorem 1 is proven using the following estimate for integral points (Propo- 
sition 30): 



Ingram's argument depends upon a similar estimate, which in turn depends 
upon examination of the division polynomials \l/ n of an elliptic curve. In partic- 
ular, for a point P, he bounds the size |^ r re (P)| in relation to the denominator 
D n of [n]P, by considering the valuations v p (ty n (P)) for each prime. The 
sequence W n = ^ n (P) is called an elliptic divisibility sequence, or EDS. 

As one might expect, the arithmetic geometry of the underlying curve and 
point shows itself in the number theory of the elliptic divisibility sequence, 
which is a subject of interest in its own right. In fact, if one pursues an 
analogy to the relationship between an EDS and its underlying curve, replacing 
the elliptic curve with a twist of the multiplicative group, then one obtains, 
instead of an EDS, a Lucas sequence of the first kind, such as the Mersenne 
or Fibonacci numbers. The centuries-old number theoretic questions about 
Lucas sequences, such as the prime factorisation of their terms, when asked 
about elliptic divisibility sequences, translate to questions about the arithmetic 
geometry of P and E, such as the orders of P under reduction to finite fields. A 
great many of these questions have been studied for EDS: appearance of prime 
terms [7, 12], primitive divisors [11, 19, 37], squares and powers [10, 14, 22] 
and the sign of terms [31], to name a few. 

In this paper, we give a full, explicit description of the possible sequences of 
valuations v(W n ) for an EDS over a p-adic field or a number field. Ingram's 
result depends on work of Cheon and Hahn on such sequences of valuations 
[3], and it is here that the dependence on M(P) arises. Cheon and Hahn 
describe the sequence of valuations recursively, determining a growth rate. In 
contrast, this paper provides a closed form whose parameters depend on the 
reduction properties of P and E. It is this that allows us to prove Theorem 



h(P) < ch(E). 




then the bound on all but one sufficiently large n would become 



h{[n\P) < Ch{E). 



h(P) < \ogn+—h(E). 
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1. However, it is the intention of this paper to give a complete description of 
these valuation sequences for its own sake, and this work makes up the bulk 
of the paper. 

For primes of good reduction for the associated elliptic curve, the sequence 
of valuations at a prime place is well understood and has a simple, pleas- 
ing description which has become a sort of 'folk theorem,' although its first 
appearance in print is due to Cheon and Hahn [3, 4] (but see Remark 16). 

Theorem 3 (Theorem 12, Introductory Form; see Section 5 for references to 
other versions appearing in the literature). Let E be an elliptic curve with good 
reduction over a p-adic field K with valuation v. Let np > 1 be the order of 
P G Eq{K)/Ei{K). Suppose that E is a minimal Weierstrass model and that 



v(W, 



n P . 



> 



p-1' 



Then 



v(W n ) 



v(W np ) 




v(n/np) 



np | n, 
np j n. 



In Theorem 12, we give a more complete characterisation than has, to our 
knowledge, appeared in the literature. In particular, we remove the assumption 



that v(W, 



np, 



> 



v(p) 



at the cost of some extra complication to the formula. 



In contrast to the good reduction case, the primes of bad reduction often 
pop up in great quantity in an EDS, in frequency depending on the reduction 
of P on the Neron model. We now state an introductory theorem combining 
all types of reduction (each treated separately in the paper). 

Theorem 4 (Theorems 8, 12, 17, 24 and 25, Combination Introductory Form). 
Let K be an unramified extension ofQ p , p ^ 2. Let W n be an EDS, associated 
to an elliptic curve E/K in Weierstrass form, and non-torsion P G E(K). 
There exist integers a, £, c±, c 2 , c 3 , c 4 , c 5 such that 

v{W n ) = — \R n {a, £) + c 2 n 2 + c 3 H 



where 



n 2 a(£ — a) 




2£ 





c 4 + v[n) 


na(£ — no) 
~2£ 



c 5 
c 5 



n 
n 



and x denotes the least non-negative residue of x modulo £. 
Furthermore, 

E has potential good reduction or 
P has non-singular reduction 







Rn(a,£) =0 



The full results in this paper apply to all p-adic fields and to torsion points, 
at the cost of some complication to the final term of the formula. They also 
provide much more detail about the significance and possible values of the pa- 
rameters. The sequences R n {a, £), here dubbed elliptic troublemaker sequences, 
satisfy a host of properties examined in Section 7. 

For P such that [n]P ^ O modulo p, the valuations of W n are connected to 
Neron- Tate local heights by the following relationship [28, Exercise VI. 6. 4(e)]: 

n 2 - 1 



X p ([n)P)=n 2 X p (P)-\og\W n \ p + 



12 



log |A| 
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Some portions of the results in this paper can be viewed as results about local 
heights, and could be proven by recourse to the established theory of such. 

In the case of good reduction in minimal Weierstrass form, Theorem 3 im- 
plies that v(W n ) is asymptotically equal to v(n) as a function of n (on the 
non-zero terms). Cheon and Hahn show, using a recurrence relation for EDS 
(see (5)), that for P non-torsion having singular reduction, v(W n ) is asymp- 
totically equal to Cn 2 for some constant C [3]. Everest and Ward use the 
elliptic Jensen formula to give a growth rate in this situation of 

log \V n (P)\ v = (X V (P) + log |A E |„/12) n 2 + 0(n c ), 

for some constant < C < 2 which may depend on P [9, Theorem 3]. Here, 
X V (P) is the Neron local height (note that [9] uses a different normalisation 
than ours; we follow Silverman [28, Chapter VII]). Everest and Ward use this 
result to give an algorithm for computing the canonical height of a point. 
Theorem 32 improves the error term on this estimate to O(logn); see Section 
11.1. 

For any torsion point P, the W n are supported only on primes of bad re- 
duction (see Remark 14). Gezer and Bizim give some explicit descriptions of 
these valuations over Q for N < 13 [13, Theorem 2.2]. Their formulae can be 
restated in terms of elliptic troublemaker sequences. See Section 11.2. 

Throughout the paper (except in the last three sections, 10 through 12), 
let p be a prime, let K be a finite extension of Q p , and let R be the ring of 
integers of K, with maximal ideal Ai. Let v be a valuation for K, let tt be a 
uniformizer, and let k be the residue field. Let E be an elliptic curve defined 
over K, let P G E(K), and let W n be the EDS associated to E and P. 

Sections 2 and 3 provide background. Section 4 generalises the central 
lemma on formal groups that lies at the core of Theorem 3. Sections 5, 6, 
8 and 9 describe the valuation sequence v{W n ) for each type of reduction. 
Section 7 considers the properties of elliptic troublemaker sequences. Sec- 
tion 10 proves Theorem 1, while Section 11 examines a few other connections 
and applications. Finally, Section 12 gives some detailed examples of elliptic 
divisibility sequences and their sequences of valuations. 

Acknowledgements. The author would like to thank Patrick Ingram, Joseph 
H. Silverman and Jonathan Wise for helpful suggestions. 



2. Preliminaries on division polynomials 

In this section, we briefly catalogue some of the standard properties of divi- 
sion polynomials. The proofs are largely computational, and are omitted. For 
background, see especially [1, Section 2], but also [8, Chapter 9], [29, Exercise 
III. 3. 7]. Suppose the elliptic curve E is given in standard Weierstrass form 



E : y 2 + a\xy + a^y = x 3 + a2X 2 + a^x + a^. 
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The division polynomials ^ n E Z[ai, a 2 , a 3 , 04, a 6 , a;, y] for the curve are 
defined recursively using the initial values 

#i = 1, 

\1>2 = 2y + aix + a 3 , 
^ 3 = 3a; 4 + b 2 x 3 + 3b A x 2 + 3b 6 x + 6 8 , 
^ 4 = * 2 • (2x 6 + 6 2 x 5 + 5b 4 x 4 + 106 6 x 3 + 106 8 x 2 
+ (b 2 b 8 - b 4 b G )x + (b4b 8 - bl)) , 
(here 6j are the usual quantities [29, Section III. 1] ) and the recurrences 

*2m+l = *m+2*m ~ for m > 2 

The n-th division polynomial vanishes at all non-trivial n-torsion points: it 
has divisor £ QeE[n] (Q) - n 2 0. 

Proposition 5. P is a non-trivial n-torsion point if and only ifty n (E,P) = 0. 
There exist <f) n , u n E Z[ai, a 2 , a 3 , 04, a6, y] such that 

In fact, <fi n and u;^ can be given by the following relations: 

<fi n = x^l - *„_!* n+1 , 
Ayu n = ^l_^> n +2 - *n-2*n+l- 

If we assign the natural weights 
(3) = 2, iu(y) = 3, it; (a*) = i, 

then the Weierstrass equation is homogeneous of weight 6. Any change of 
coordinates between Weierstrass equations of the form 

x' = u 2 x, y' = u 3 y 

changes the coefficients according to a\ = u x ai and A' = u l2 A. These weights 
are useful in determining the valuations of division polynomials. 

Proposition 6. The division polynomials have the following properties. 

(i) Using the natural weights (3), <fi n , and u) n are homogeneous of 
weight n 2 — 1, 2n 2 and 3n 2 , respectively. 

(ii) As polynomials in x, 

ty 2 = n 2 x n _1 + (lower order terms) E Z[ai, a 2 , a 3 , a 4 , a 6 , x], 

2 

4> n = x n + (lower order terms) E Z[ai, a 2 , a 3 , 04, ae, x\. 

(Hi) If E is given by a minimal Weierstrass equation, v is a non-archimedean 

valuation, and v(x),v(y) < 0, then v(<fi n ) = n 2 v(x). 
(iv) The change of variables x' = u 2 x + r and y' = u 3 y + sx + t from E to 

E' gives 

y n (x',y',E')=u n2 - 1 q n (x,y,E). 
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The division polynomials satisfy the more general recurrence equation 

from which the recurrences (2) can be obtained as special cases [33, Theorem 
3.7]. 

Finally, using the Weierstrass a-function and the usual complex uniformiza- 
tion C/A of an elliptic curve over C, Ward showed that [36, Theorem 12.1], 

a(nz, A) 



(4) * n {z,A) 



a(z,A) n2 



3. Preliminaries on elliptic divisibility sequences 

Definition 1. An elliptic divisibility sequence, or EDS, is a sequence W n sat- 
isfying 



(5) W n+m W n - m W? + W m+T W m - T W* + W r+n W r . n Wl = 0. 

The connection between EDS and elliptic curves is described by Ward in his 
original memoir on the subject. We let \l/ n denote the n-th division polynomial. 
We state an updated version of Ward's theorem which applies to fields of 
characteristic zero in general (it follows from his proof): 

Theorem 7 (Ward [36, Theorem 12.1]). Let E be an elliptic curve defined over 
a field K of characteristic zero, and let P £ E(K). Then W n = ^n(-P) is an 
elliptic divisibility sequence. Furthermore, if W n £ K is an elliptic divisibility 
sequence, then there exists a constant C £ K, an elliptic curve E/K and 
P £ E{K) so that W n = CV n {P). 

In other words, each EDS over K appears as the sequence of division poly- 
nomials for some elliptic curve E/K evaluated at a point P £ E(K). 

Let E be an elliptic curve defined over K (by this we will always mean 
that E is given by a Weierstrass equation), and let O ^ P £ E(K). Let W n 
be the elliptic divisibility sequence associated to E and P. If we change the 
Weierstrass equation for E, we may change the elliptic divisibility sequence. 
For example, it will be convenient to change the equation to one in minimal 
Weierstrass form, so we can consider the reduction type. Fortunately, the as- 
sociated elliptic divisibility sequence changes in a simple fashion, as described 
by Proposition 6(iv). This immediately gives the following result, which will 
be important enough for the later results that we include it as a theorem. 

Theorem 8. Let E be an elliptic curve defined over K and let O ^ P £ E(K). 
Let W n be the associated elliptic divisibility sequence. Then there exists an 
isomorphism <f> : E — > E' , defined over K , to an elliptic curve E' in minimal 
Weierstrass form. Let W' n be the elliptic divisibility sequence associated to 
4>(P)- Then there exists an rp £ Z such that 

v (W n ) = (n 2 -l)r P + v(W^). 
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4. Central Lemma on Formal groups 

For a point of non-singular reduction, the sequence of valuations v(W n ) is 
controlled by the formal group of the elliptic curve. For points of singular re- 
duction, the sequence of valuations is partially controlled by the formal group 
of either the elliptic curve, or the multiplicative group, depending on the type 
of reduction. In both cases, the results rely on a lemma describing the val- 
uations of the multiples of a point in an abstract formal group. Although 
the formula (6) below is quite complicated, in most cases we encounter, j = 0, 
whereupon it simply reduces to v(z) +v(n). For background on formal groups, 
see [29, Chapter IV]. 

Lemma 9. Let J 7 be a one-parameter formal group defined over R, and let 
z G ^{M). There exist integers b, j , h, and w G Z-° U {oo} such that for all 
integers n, 

f Wv(z) + |=±/i + v(n) - jv(p) + w ifv{ri) > jv(p) 
[Q) v[[n\z) — < (n)/v( ) , . (,»w/»w. u ., i \ ^ ■ , \ ■ 

Furthermore, 

(i) b is the smallest power ofT with a coefficient not divisible by p in the 
series \p\T, and h is the valuation of said coefficient. If no such integer 
exists, then 6=1 and h = 0. Otherwise, p \ b and b > 1. 

(ii) If b = 1, then j = 0. If b ^ 1, then j is the smallest non-negative 
integer such that 

v(p) < V (0 - l)v(z) + h) . 

(Hi) w = unless b > 1 and v(p) = V {{b — l)v(z) + h), in which case 

( \f +1 }z \ 
w = v [ n , n . - h, 

which may be equal to oo. 

Remark 10. For the formal additive group, given by f(X, Y) = X + Y, the 
series for multiplication-by-m is [m]T = mT, so b = 1, h = j — w = 0, and 
therefore (6) simplifies to u([n]^) = v(z) + v{n). 

For the formal multiplicative group, given by /(X, Y) = (X + 1)(Y + 1) — 1, 
multiplication-by-m is 

[ m ]T = (T + l) m — 1 = T m + mT m ~ l + Q T m ~ 2 + • • • + mT, 

so b = p and h = 0. 

The formal group of an elliptic curve in standard Weierstrass form is given 

by 

f(X, Y)=X + Y - a x XY - a 2 (X 2 Y + XY 2 ) 

+ 2a 3 (X 3 Y + XY 3 ) + ( ai a 2 - 3a 3 )X 2 Y 2 + .... 

In particular, it may occur that one or more of the conditions h > 0, b > p and 
j ^ may hold, for example, over a highly ramified 2-adic field. See Examples 
34 and 37. 



Integral points on elliptic curves and explicit valuations of division polynomials 9 

Proof of Lemma 9. By [29, Proposition IV.2.3(a)], multiplication-by-n has the 
form 

[n]T = nT + 0(T 2 ). 
Suppose n is coprime to p. Since v(z) > 0, we obtain 

v ([n]z) = v(z). 

Since \m\jn2\T = [mi]([m2]T), it therefore suffices to consider only n equal to 
a power of p. Let = v(\p ]z) for all non- negative k. 

By [29, Corollary IV.4.4], the formal group law for [p] has the form 

(7) \p]T = pf{T)+g(T*), 

where / and g have no constant term. We may also assume that the coefficients 
in g are not divisible by p. By [29, Proposition IV.2.3(a)], 

f{T) = T + 0{T 2 ). 

Let b G Z be the smallest power of T in g(T p ) with a non-zero coefficient, and 
let h be the valuation of that coefficient (so, in particular, < h < v (p)). Let 
us momentarily skip the case that g = 0, so that we have p \ b and b > p > 1. 
Define j to be the smallest non-negative integer such that 

v(p) < V ((6 - \)v{z) + h) . 

For the moment, let us also assume that the inequality is not an equality 
From (7), 

(8) ^([p]- 2 ) — niin{w(2;) + v(p), bv(z) + h} 

Suppose that j > 0. Then, since v(p) > (b — l)v(z) + h, the second option 
determines the minimum in (8), in which the inequality is an equality, and so 

di = ba + h 

Repeating this argument for all k < j, we find 

V — 1 

a,\ = ba + h a 2 = b 2 a + bh + h ■ ■ ■ =^ a~ = Va Q H h. 

6—1 

For k = j + 1, we again obtain (8) (where we replace z with [p'Jz), but 
v(p) < V ((b — l)v(z) + h), so the first option determines the minimum, again 
where inequality is equality, which implies that 

b j - 1 

Oj+i = a,j + v(p) = Vao + b _ 1 h + v(p)- 

Repeating this argument, we find that for all k > j, 

W - 1 

a k = Wao + b _ 1 h + (k- j)v(p), 

from which the result follows with w — 0. 

Now suppose that v(p) = b> {{b — l)v(z) + h). This gives v{p) = (b—l)a,j+h. 
The only place in which this affects the proof is the application of (8) for 
k = j + 1. In this case, the minimum in (8) compares two equal values and 
we obtain instead the alternate form 

Oj+i = dj + v(p) + w, 
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for w either oo (if [p 7 '" 1 " 1 ^ = 0) or a non-negative integer. If w ^ oo, then we 
find that 

w = cij + i — dj — v(p) 

= a J+ i — dj — (b — l)oj — h 
= v([p> +l ]z) -to([p J » - h. 

For k > j + 1 , 

a k = a fe _i + v(p) 

as before. Combining this with the other cases yields the general formula. 
Finally, we return to the case that g = 0. In this case, (8) is replaced with 

v([p]z) = v(z) + v(p), 

and we obtain the formula with 6=1, h = 0, j = and w = 0. □ 

The formula in Lemma 9 being somewhat cumbersome, we set some notation 
for the class of such sequences. 

Definition 2. Suppose p G Z is a prime, and let u be the valuation on Q 
associated to p. Suppose 

bepZ >0 u{i}, dez >0 , hez^°, sgZ >0 u{oo}, wez-°u{oo}. 

If b = 1, set j = 0. Otherwise, let j to be the smallest non-negative integer 
such that 

d<V((b-l)s + h). 
Define a sequence in Z U {oo}, 

We record a few properties whose proofs are immediate. 

Proposition 11. (i) lfj = 0, then S n (p,b,d,h,s,0) = s + du{n). 
(ii) For any integer k, S n (p,b, kd, kh, ks, kw) = kS n (p,b,d,h,s,w). 
(Hi) For fixed integers p, b, d, h, s, andw, S n (p,b,d,h,s,w) = O(logn). 

5. Non-singular reduction 

The sequence v(W n ) for a point of non-zero non-singular reduction has 
been described in various contexts in [3, Theorem 1] (but see Remark 16), 
[4, Lemma], [5, Lemma 2.6], [30, Lemma 5], [35, Lemma 3.4]. Loosely speak- 
ing, in most cases one expects that for non-torsion points with non-singular 
reduction of order np > 1, 



(9) v(W n 



v{W np ) + v{n/np) if np \ n 
if np \ n 



There are exceptions, however. Lemma 9 on formal groups allows us to prove 
a somewhat stronger, more general statement. Please refer to Definition 2 for 
the sequence S n , which generalises (9). 
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Theorem 12. Assume that E is in minimal Weierstrass form, P has non- 
singular reduction, and let np be the smallest non-negative integer such that 

[np\P = O in k. There exist 

b P EpZ >0 U{l}, h P eZ^°, Sp E Z >0 U {oo}, wp E Z-° U {oo}, 

such that 
(10) 

v(W n ) = mm{o i V -^±)n* + { S n/np (p,b P ,v(p),h P ,s P ,w P ) ifn P \n 

y nl \ 2 J \ ifn P \n 

Furthermore, v(x(P)) < if and only if n P = 1. 

Corollary 13. Assume that P is a non-trivial torsion point with non-singular 
reduction to a point of order n P > 1. Suppose that E is a minimal Weierstrass 
model. Then 

\ f oo if n P \n 
< W ^) = { lfn P \n ■ 

Remark 14. This corollary implies that the non-zero terms of an elliptic divisi- 
bility sequence associated to an integral torsion point P are supported only on 
the primes of bad reduction. If P is a non-integral torsion point (necessarily 
of order 2), then the non-zero terms of the EDS are supported on primes of 
bad reduction, and 2. See Example 35. 

Corollary 15. Assume that P is a non-torsion point with non-singular re- 
duction to a point of order n P > 1. Suppose that E is a minimal Weierstrass 
model. Under any of the three below listed conditions, 



;n) v(w n ) 



v(W np ) + v (n/np) ifn P \n 
if np \ n 



(i) v{p) < (p-l)v(W np ). 

(ii) K = Q p , and we are not in the special case that p = 2, v(W np ) = 1 
and E has ordinary or multiplicative reduction. 

(Hi) K is unramified over Q p forp > 3. 

Remark 16. The statement of [3, Theorem 1] corresponding to this paper's 
Theorem 12 is incorrect, in that it holds only under the missing assumption 
that E is in minimal Weierstrass form. This assumption is required when 
applying [29, Proposition VII. 2. 2] during the proof of their Lemma 1. Fur- 
thermore, they give the simpler form (11) while neglecting to include the as- 
sumption that v(p) < (p — l)v(W np ) or an equivalent. These omissions are 
corrected in the later paper [4]. 

We now prove Theorem 12 and its corollaries. 

Proof of Theorem 12. There is a standard isomorphism of groups (see [29, 
Proposition VII.2.2]) 

Q : E^K) ^ E(M), (x,y)^--, 

y 
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where E(A4) is the formal group of E. Write 

\ n n 

as in Section 2. 

We begin with the case that np = 1, i.e. P = O. Writing P = (x,y), we 
have np = 1 if and only if v(x) < 0. From the minimal Weierstrass equation for 
E, we obtain 2v(x) = 3v(y). Let Vq = v(y) — v(x) = \v(x). Then v(x) = 2i> 
and v(y) = 3v . Since v < 0, by Proposition 6(iii), v(<f) n ) = 2n 2 vo, from which 
we obtain 

v(Q([n]P)) = v(x/y) = --v(x) = v(V n ) - n 2 v . 

Then, 

(13) u(tt B ) = V Mpl n 2 + v(Q([n]P)). 

Now suppose that P ^ O instead. Then we have v(^f n ), v(</> n ), v{uj n ) > (by 
the definition of the division polynomials). A theorem of Ayad [1, Theorem A] 
implies that since P has non-zero non-singular reduction, at least one of v(^ n ) 
and v(4> n ) is zero for each n. It follows that n = np is the smallest positive n 
such that v(ty n ) > 0, and that v((pkn P ) = 0. This implies v(cUk np ) — by (12) 
and the form of the Weierstrass equation. Therefore for all integers k, 

(14) v(Q([kn P ]P)) = v(-<p knp ^ knp /u knp ) = v(V knp ). 

Now, in both cases {n P = 1 and n P ^ 1), Lemma 9, written in terms of 
Definition 2, says 

v(0([kn P ]P)) = S k (p, bp, v(p), hp, v(0([n P ]P)), w P ) 

for some bp, hp, and wp. If np \ n, then v(^f n ) = 0. This, combined with (13) 
and (14), completes the proof. □ 

Proof of Corollary 13. Since n P > 1, we have v(W n ) = whenever np \ n. 
Furthermore, sp = v(W np ) = oo since W np = by Proposition 5. □ 

Proof of Corollary 15. In all three parts, we use the notation of Theorem 12 
and Lemma 9. 

Condition (1). Since P is non-torsion, v(W np ) ^ oo. Since np > 1, 

(ur) = f S n/n P {p, bp, v(p), hp, v(W np ), wp) if n P \ n 
V ^ n ' \ if rip \n 

Condition (1) implies that j — (since h > 0) in Definition 2 (since this is 
immediate if bp = 1, while otherwise bp > p from which it follows). Condition 
(1) also implies wp = by Lemma 9(iii). By Proposition 1 1 (i) , 

S k (p, bp, v{p), hp, v{W np ), 0) = v{W np ) + v{p)u{k) = v{W np ) + v(k). 

Condition (2). For Q p , hp = by definition. We have v(p) = 1 and so 

{p - l)v{W np ) > p - 1 > l=v{p). 

Furthermore, the overall inequality between leftmost and rightmost is strict 
(and hence we are in condition (1) and we are done) except possibly in the 
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case that p = 2 and v{W np ) = 1. Either way, j = 0. Then, according to 
Lemma 9 and the proof of Theorem 12, 

w P = v([2]z/2z), 

where z = Q([np]P). If wp = 0, we are done as in condition (1). For an 
elliptic curve, the formal group law is 

[2}z = 2z- a x z 2 - 2a 2 z 3 + 0(z 4 ) 

so that in the case that a, G R, p = 2 and v(z) = 1, 

v([2]z/2z) > v(l - a.xz/2) > v{a x ) = 0. 

(Recall that the residue field k has only one unit since p = 2.) As remarked 
in the proof of [30, Lemma 5], 

v(ai) = -<=>- E has ordinary or multiplicative reduction. 

Condition (3). Since p > 3, and K is unramified over Q p , 

v(p) <v{W np ) < (p-l)v(W np ) 

and therefore condition (1) is satisfied. □ 

6. Singular reduction on a curve of potential good reduction 

In the case that P has singular reduction but E has potential good reduction, 
we can extend the field and change coordinates to obtain a minimal Weierstrass 
equation of good reduction for the curve. Keeping track of the effect this has on 
the elliptic divisibility sequence allows us to give a formula for the valuations 
v(W n ). In short, there is some positive integer d dividing 24 such that dv(W n ) 
is of the form (10) given in Theorem 12. The statement is made precise as 
follows. 

Theorem 17. Assume that E has potential good reduction. There exists an 
isomorphism <fi : E — >■ E' to an elliptic curve in minimal Weierstrass form 
with good reduction, such that is defined over a finite extension L of K , with 
ramification degree d \ 24. Let v\ be a valuation of L lying over v, such that 
V\{z) = dv{z) for z G K , and let W n be the EDS associated to 4>(P). Then, 

(15) dv(W n ) = (n 2 - l)dv(A E )/12 + Vl (W' n ) 

where Ui(W^) is of the form (10) of Theorem 12, since 4>{P) has non-singular 
reduction. 

Proof of Theorem 1 7. By the theory of reduction types, over some extension 
L/K, and under an appropriate change of coordinates defined over L, we 
obtain an isomorphic curve and point E' and P' having good reduction. Let Vi 
be the valuation for L lying above v such that v\{z) = dv(z) for x G K, where 
d is the degree of ramification of L over K. Then dv(W n ) is the valuation of 
the sequence associated to E and P considered over L. Changing coordinates, 
using Theorem 8, we obtain 

dv{W n ) = (n 2 - l)r + Vl (W' n ) 

for some r G Z. If E has bad reduction, the extension L/K is ramified, so 
that d > 1 [29, Proposition VII. 5. 4(a)]. Furthermore, we can choose L so that 
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d divides 12 by changing to Legendre normal form [20, Proofs of Propositions 
111.1.7(a), VII. 5. 4(c)], unless p = 2, in which case d divides 24 by changing to 
Deuring normal form [29, Proofs of Propositions A. 1.3 and A. 1.4(a)]. Even if 
E/K was minimal, E/L will not be minimal. The valuation of in L is d 
times greater; r must be chosen to change this to 0. Hence r = dv{lS.E)/V2. □ 

Remark 18. Ayad shows that a P of non-trivial reduction on a minimal curve 
has singular reduction if and only if v(W n ) > for all n > 2 [1, Theorem A]. In 
the above theorem, if P has singular reduction, we do indeed obtain sequences 
satisfying v{W n ) > for all n > 2. See Example 37. 

The following proposition gives some restrictions on the parameters used in 
Theorem 17. 

Proposition 19. Under the hypotheses and notations of Theorem 17, with 
reference to the parameters of (10), let 

d < = i 

gcd(dXA s )/12)' 

Then, 

(i) Ifd' = 2,4,8, then n P G {1,2}. 

(ii) If d' = 3, then n P G {1, 3}. 
(Hi) If d! ^ 1, 2, 3, 4, 8, then n P = l. 

For Proposition 10, we require an elementary number theoretical lemma. 
Lemma 20. Let a, b G Z >0 . Suppose that for all integers n, 
(16) n ^ (mod a) ==>- n 2 = 1 (mod b). 

Then 

(a, b) G {(1, *), (*, 1), (2, 2), (3, 3), (2, 4), (2, 8)} 
where * represents any positive integer. 

Proof. The statement (16) holds vacuously if a = 1 and trivially if b = 1. 
Suppose a = 2. Setting n = 2k + 1 we find that n 2 — 1 = Ak(k — 1), so 

a = 2 be {2,4,8}. 

Suppose a = 3. Taking n = 3k ± 1, we find that n 2 — 1 = 3/c(3/c ± 2), so 

a = 3 6 G {3}. 

Claim: If a, 6 > 1, then a | 6. For, if not, let p be a prime satisfying p | a, 
p\b. Then n ^ (mod p) implies n ^ (mod a), so we can replace a in the 
statement (16) with p. Thus we may assume without loss of generality that 
a and b are coprime. But if so, then the condition n ^ (mod a) is satisfied 
by at least one element in every equivalence class of integers modulo b. But 
n 2 = 1 (mod 6) is not satisfied by every such equivalence class, a contradiction. 
Now, suppose a > 3. Then, since a \ b, in particular, 

n ^ (mod a) ^=^> n 2 = 1 (mod a) 

But for a > 3, there is more than one equivalence class of non-zero squares. □ 
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Proof of Proposition 19. Write r = dv(A E )/12, and g = gcd(d,r). Since 
v(W n ) G Z, we find that for n divisible by rip, 

S n /n P (p, bp, dv(p), hp, s P , w P ) = -(n 2 - l)r = (mod g). 

If n = np, we find that g | sp, and from this we deduce that g \ hp (if j — 
we may simply change h without changing the function S n / np ; otherwise take 
n satisfying v(n/np) = 1). Then g | wp by taking n having v(n/np) large 
enough. Therefore, by Proposition 11(h), 

S n /n P (p, bp, dv(p),h P , s P , w P ) = gS n/np (p, b P , dv(p)/g, h P /g, s P /g, w P /g). 

So we can replace the parameters in equation (10) and (15) as follows: 

d' = d/g, h' P = h P /g, s' P = s P /g, r' = r/g, w' P = w P /g, 

and in particular, gcd(cf,r') = 1 (the notation d! = d/g agrees with the state- 
ment of the theorem). 

Since v(W n ) is an integer, (10) now implies that if np > 1, then 

n ^ (mod np) ==>- [n 2 — l)r' = (mod d'). 

Since r' is coprime to d', Lemma 20 implies that the implication only holds if 

(n P , d') G {(1, *), (*, 1), (2, 2), (2, 4), (2, 8), (3, 3)}. 

□ 

7. Elliptic troublemaker sequences 

In this section we define a class of integer sequences which will be needed to 
describe v(W n ) for points P of singular reduction on an elliptic curve E with 
multiplicative or potential multiplicative reduction. 

Definition 3. To any pair (a,£) of integers satisfying £ ^ 0, we associate an 
integer sequence called the elliptic troublemaker sequence, defined for n > 
by 

(17) R n (a,£) 

where x denotes the least non-negative residue of x modulo £. 

Some examples are given in Table 1. We devote the rest of this section to 
properties of these sequences. 

Proposition 21. The function R n (a,£) has the following properties. 

(i) R n (0,£) = 0. 

(ii) R (a,£) = R^aJ) = 0. 
(Hi) R n (a,£) = R n (£±a,£). 

(iv) For any positive integer k, R n {ka, k£) = kR n (a,£). 

(v) For positive integers n and m, R n {ma,£) = R nm (a,£) — n 2 R m (a,£). 

(vi) R n+l (a,£) + R n ^(a,£) - 2R n {a,£) < £. 

(vii) For < n < £/a, 

n 2 — n 
R n (a,£) = — - — a. 



n 2 a(£ — a) 




nd{£ — na) 


2£ 




2£ 
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Table 1. Elliptic troublemaker sequences Rn(a,£) for various (a,£). 



n 




1 


2 


3 


4 


5 


6 


7 


8 


9 


10 


11 


12 


13 


Rn(l,2) 







1 


2 


4 


6 


9 


12 


16 


20 


25 


30 


36 


42 


Rn(l, 3) 







1 


3 


5 


8 


12 


16 


21 


27 


33 


40 


48 


56 


Rn(2, 3) 







1 


3 


5 


8 


12 


16 


21 


27 


33 


40 


48 


56 


Rn(lA) 







1 


3 


(3 


9 


13 


18 


24 


30 


37 


45 


54 


63 


#n(2,4) 







2 


4 


8 


12 


18 


24 


32 


40 


50 


60 


72 


84 


Rn(l,5) 







1 


3 


6 


10 


14 


19 


25 


32 


10 


18 


57 


67 


Rn(2,5) 







2 


5 


9 


15 


21 


29 


38 


18 


60 


72 


86 


101 


Rn(l,Q) 







1 


3 


6 


10 


15 


20 


26 


33 


11 


50 


60 


70 


i2n(2,6) 







2 


6 


10 


16 


21 


32 


42 


54 


66 


80 


96 


112 


i? n (3,6) 







3 


6 


12 


18 


27 


36 


48 


60 


75 


90 


108 


126 


i?»(l,7) 







1 


3 


6 


10 


15 


21 


27 


31 


12 


51 


61 


72 


i?n(2, 7) 







2 


6 


11 


17 


25 


35 


15 


57 


71 


86 


102 


120 


i? n (3, 7) 







3 


7 


13 


21 


30 


12 


51 


69 


85 


103 


123 


144 


i? n (l,ll) 







1 


3 


6 


10 


15 


21 


28 


36 


45 


55 


65 


76 



(viii) If £ I na orif0<a<£<7, then 

n 2 a(£ — a) 



21 



(18) R n (a 
(ix) An alternative formula for R n (a,£) is 

(19) R n (a,£ 



£ f /na 

nil" 



na 



/na 
VT 



na 



—n 



+ n 



(x) If < a < £, then an alternate formula for R n (a,£) is 

n 2 a(£ — a) 



(20) R n {a,. 



£ ( /na 

2 vAT" 



na 



na 



na 



(xi) Let B 2 {t) = t 2 — t + | ; called the second Bernoulli polynomial, and let 

B2(t) = Biit — \ t\), called the periodic second Bernoulli polynomial. 
Then an alternate formula for R n (a, £) is 



R n (a, 



/na\ 9 ~ /a\ n 



(xii) An alternate formula for R n (a, £) is 



R n (a, 



(21) 

(xiii) We have 





(\rr\ \ 






n 

— a + 


k£ — na 


-n 2 


^k£-a 




V^ 1 ) 




) 
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where x denotes the least non-negative residue of x modulo £. 

Proof. We prove the various parts out of order according to the various inter- 
dependencies. 

Parts (i), (ii), (iii) and (viii) Direct calculations from the definition. 
Part (vi) For < x < 1, < x(l — x)/2< 1/8, so that as b ranges through 
the least non-negative residues modulo £, 



2t 



(22) 

For any A and B, 

(23) L^J + L^J < [A + B\, 

From the definition, (22) and (23), 

R n+1 (a, £) + i? n _i(a, t) - 2R n {a, £) < 



VA\ + L-AJ 
a{£ — a 



-1. 



< 



Part (x) We will show that (20) is equal to (17), under the assumption 
that < a < £. 

We consider the case £ \ na separately. In this case, using (20), to show 



(17) (or actually (18)), we need only check that 



n 2 a(i—a) 



which is an integer 



divisible by £, is even. Both cases, 2 | £ and 2 { £, are immediate. Therefore 
we assume that £\na. 

We express certain quantities in terms of their integer and fractional parts: 
write 

n{£ — a) n 2 a(£ — a) 

—„ =Y + y, ■ 



na 

— = X + x, 



2C 



Z + z 



where X, Y, Z are integers and < x,y < 1 and < z < 1. We also know 
that x + y = 1. Furthermore, x and y are rationals with denominator dividing 
I. We have 



Z + z=-(X + x)(Y + y). 



Write 



-(X + x)(Y + y) 



2 

\{ZXY + £xY + X£y) + ^xy. 



We wish to show that the first of the two terms on the right is an integer. 
That is, we want to show the integer £XY + [£x)Y + X[£y) is even (note 
that x and y are not integers, but £x and £y are). We do this by cases. If 
X = Y = (mod 2), then the integer is even. If X = Y = 1 (mod 2), then 

£XY + (£x)Y + X(£y) = £ + £x + £y = 2£ = 0. 

If X ^ Y, by symmetry we may assume that X = and Y = 1. Since 
X + Y = n — 1, we discover that n = 0. Then, since na = X£ + x£, 

£XY + (£x)Y + X(£y) = naY = 0. 

Thus we have discovered that \{£XY + £xY + X£y) is an integer. 



Hence 



-(£XY + £xY + X£y) 
2 



2 Xy 



z = -xy 



2 Xy 
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Write x = s/£ for some < s < & (in other words, s = na). Noting that 
xy = x — x 2 , and substituting for the meaning of x, y and z in the second 
equation, we obtain 



n 2 a(£ — a) 
2£ 



n a(t — a / 
21 



/ /na 


na 


\ 2 /na 


na 




s(£ - s) 


\yr~ 


I £ - 


) ~ \T ~ 


L i \ 


»- 


2£ 



which is what was required to prove. 

Part (ix) If < a < £, it is immediate that (19) reduces to (20). Therefore, 
using parts (iii) and (x), it suffices to check that (19) is independent of the 
choice of residue of a modulo £. But this is a direct calculation (compare the 
formula (19) for R n (a,£) and R n (a + £,£)). 

Parts (iv) and (xi) Direct calculations from (19) of part (ix). 

Part (v) Letting 



S(n) 



na 



na 

T. 



/na 

vT 



na 



we obtain, from the formula (19) of part (ix), 

R n (ma,£) = S{mn) — n 2 S(m), 
Rmn{.0',£) = S{mn) — m 2 n 2 S(l), 
n 2 R m {a,£) = n 2 S(m) - n 2 m 2 S(l). 



Part (xii) Let 



A calculation reveals that 
T(n) = 



T(n) 



na 



I nQ I 

L t J 

5> 



fc=i 



+ 



na 



na. 



2na 



na 



Then, expanding formula (19) of part (ix), we obtain 
R n {a4) = T{n)-n 2 T(l) + - 



na 

7- + 



n 2 a 



Part (vii) Follows immediately from part (xii). 

Part (xiii) Immediate from parts (xi) and (iii), together with the observa- 
tion that X(l — X) has maximum 1/4 on the interval [0, 1]. □ 

Remark 22. By Proposition 21, parts (iii) and (iv), it suffices to study se- 
quences satisfying < 2a < £ with gcd(a, £) = 1. We could index the collection 
of such sequences by Q fl [0, |]. 
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8. Multiplicative reduction 

We now turn to P having singular reduction on a curve E of multiplicative 
bad reduction, where we will require the theory of the Tate curve. 

Suppose that E does not have potential good reduction, i.e. v{je) < 0. 
In this case, there is a unique q G K* with v(q) > such that the Tate 
curve E q is isomorphic to E over a finite extension L of K. The case of 
multiplicative reduction is the case that L can be taken to be unramified, and 
split multiplicative reduction corresponds to L = K. See [28, Chapter V] for 
background. 

Definition 4. For any elliptic curve E/K with non-integral j-invariant, and 
any P G E(K), let <f> : E — > E q be an isomorphism to the Tate curve (note 
that v(q) > 0). Analytically, E q is isomorphic to K*/q z , under which 4>(P) 
corresponds to some u G K*. As a convention, choose u satisfying < v{u) < 
v(q). Define 

£p = v(q), a P = v(u). 

Note that, despite the notation, the quantity lp only depends on the elliptic 
curve E. It is a standard fact that lp = v(A(E q )) = —v(j(E q )) = —v(j(E)). 

Remark 23. Using the standard isomorphisms (see [28, Remark IV.9.6]), 

E(K)/E Q (K) -> K*/q z R* -»■ Z/i P Z, 

ap = v{u) is the component of the Neron model special fibre (= Z/£pZ) 
containing P. In particular, ap = if and only if P has non-singular reduction. 

Theorem 24. Suppose that P has singular reduction, and E is in minimal 
Weierstrass form with multiplicative reduction. Let ap and lp be as in Def- 
inition 4- Let np be the smallest positive integer such that [np]P = O in k. 
Then there exist 

s P e z >0 u{oo}, wj P eZ^°u{co} 

such that for all positive integers n, 



(24) v{W n ) = R n (a P ,£p) + 



S n/np (p,p,v(p),0,s P ,Wp) n P \n 
np \ n 



Furthermore, 

(i) Letting g = gcd(ap,£p), the integers np and sp are given by 

n P = — ^ L s P = v(l-q npap/ep u- np ). 

9 

where ord denotes the multiplicative order of the image in the residue 
field k. 

(ii) If P is a torsion point of order N , then 
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Proof. We drop the subscripts and write £ = £p and a = ap. First, we consider 
the Tate curve E g , by which we mean, as described in [28, Theorem V.3.1], 
the curve given by the model 

(25) E q : y 2 + xy = x 3 + a 4 (q)x + a 6 (q), 

in which case, the point u corresponds to (X(u, q), Y(u, q)) where X and Y are 
defined in [28, Theorem V.3.1]. We can define *& n (u, q) as the usual polynomial 
in X and Y for (25). As in [28, Proposition V.3.2], define the normalised theta 
function as 

-q k u)(l -q k u- r ) 



9(u,q) = (l-u) J 



(W) 2 



We wish to express ty n (u,q) in terms of the normalised theta function. Over 
C, we have 



V n (u,q) = {-2m) 



i_ n 2 a(u n ,q) 



a(u,q) n ' 
where 

a(u,q) = --^-.e^ mz2 e- niz e(u,q). 
lux 

(To see this, use (4), together with the standard change of coordinates to 
eliminate 2iri, for example in [28, Section V.l].) Therefore, over C, 

(26) ».(u, 8 )= ^»$$. 

Using the same method as the proof of [28, Proposition V. 3. 2(b)], this relation 
also holds over K (in fact [28, Proposition V.3.2(b)] is a special case). 

We let W n = ty n (u,q) (so it is the EDS associated to (25) and the point 
(X(u,q),Y(u,q))). We wish to discover the form of v(W n ). Note that (25) is 
always a minimal Weierstrass model in its isomorphism class (this can be ver- 
ified using [29, Remark VII. 1.1] and the g-expansions of A and C4). Therefore, 
information about v(W n ) for a Tate curve applies to any EDS associated to an 
elliptic curve E/K in minimal Weierstrass form and having split multiplicative 
reduction. 

For any k satisfying na + Ik ^ 0, we have v(l — q k u n ) = mm{£k + na, 0}. 
For k > 0, we have v(l — q k ) = 0. Therefore (recalling that a,n,£ > 0), 



v(9(u n ,q))=t P (n) + 



k£ — na 



where tp(n) = v(l — q k u~ n ) for the unique integer k for which —na + £k = 0, 
if such an integer exists, and tp(n) = otherwise. Taken together with (26) 
and (21), this gives 

v{W n ) = R n (aJ)+tp(n)-n 2 tp(l). 

However, tp(l) = since we assumed < a < £, and there is no integer k 
with k£ = a. 
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We will now find an expression for tp(n). The equation hi = na has no 
solution in k unless 

i 

gcd(a,f) 

divides n. Therefore, if Uq j n, then tp(n) = 0. Even if uq \ n, and if we let fco 
be such that k§t = rioa, as long as q k °u~ n ° ^ 1 in k, we still have tp(no) = 0. 
Therefore, let np = brio where b is the order of q k °u~ no in k. In other words, 
np is the smallest integer such that t P {n P ) ^ 0, and furthermore, if tp{n) ^ 0, 
then rip \ n. This gives the expression for rip in item (i). 

The statement of the theorem requires that we also show that rip is the 

smallest positive integer such that [n P ]P = O in E{k). But it is a property 
of division polynomials that [n]P = O exactly when W n = in k, i.e. when 
1 — q k ( n '>u~ n vanishes in k. Therefore this follows from the previous paragraph. 

We return to finding an expression for tp(n). At this point, we are reduced 
to finding an expression for 

t'p(s) = tp(srip) 

Let kp be the unique integer such that kpi = ripa, and set (3 = q kp u~ np . Then 
t' P (s) = v(l-(3 s ). 

Let sp = v(l — f3), which is positive by construction. Let U(K) be the 
kernel of the reduction map K* — > k*. Let G m be the formal multiplicative 
group. By the theory of formal groups, we have an isomorphism 

U(K) — ► G m (M), u i — y 1 — u. 

Restricting the isomorphism 

IC/q^ — ► E q {K), u ^ (X(u), Y(u)) 

to U(K), and recalling the isomorphism 

: E q>1 (K) — ► E q (M), {x, y) ^ -x/y, 

as in the proof of Theorem 12, we obtain a chain of isomorphisms 

O m (M) U(K) E^K) E(M), 

1 - u i u i ^ (X(u), Y{u)) i -X{u)/Y{u). 

It can be verified by the definitions of X(u) and Y(u) that this chain has the 
property that 

v(l-u) =v(X(u)/Y(u)). 

So s P = v(l - (3) = v(X(/3)/Y(f3)) = v(Q([n P }P)). (Note that v(l - u) = 
vil-u- 1 ).) 

Lemma 9 for G m (Ai) implies 

t' p (s) = v(l - (3 s ) = S s (p,p,v(p),0,s P ,wp), 

for some wp G Z,-°U{oo}. (Note that b = p and h — in Lemma 9 by Remark 
10.) Thus, we have shown (24), for any E/K having a minimal Weierstrass 
equation and split multiplicative reduction. We have also found an expression 
for sp and rip (item (i)) in this case. 
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Now suppose that E has non-split multiplicative reduction. Then we can let 
L/K be an unramified extension over which E is isomorphic to E q . Because 
the extension is unramified, E is minimal over L because it is minimal over 
K. Therefore E, considered over L, satisfies the assumptions of the previous 
case of split multiplicative reduction. Letting v\ be the valuation of L lying 
over K such that V\{z) = v(z) for z G K, we find that v{W n ) = v\(W n ) has 
the form (24). 

In the case that W n is associated to an iV-torsion point, N > 1, then u 
must satisfy u N = q s for some integer s coprime to N, which implies that 
Na P = sip by considering valuations. Combined with item (i), this shows 
item (ii). 

□ 

9. Singular reduction on a curve with additive potential 

multiplicative reduction 

This section covers the last remaining case, after which the accumulated 
theorems of Sections 3, 5, 6, 8 and 9 combine to give Theorem 4. 

Theorem 25. Assume that E does not have potential good reduction. There 
exists an isomorphism <p : E — > E' to an elliptic curve in minimal Weierstrass 
form with multiplicative reduction, such that <fi is defined over a finite extension 
L of K, with ramification degree d | 24. Let v\ be a valuation of L lying over 
v, such that v\(z) = dv(z) for z G K, and let W n be the EDS associated to 
0(P). Then, 

dv{W n ) = (n 2 - l)dv{c A {E))/A + Vl {W' n ) 
where Ui(W^) is of the form (10) of Theorem 12, if 4>{P) has non-singular 
reduction, or the form (24) of Theorem 24, if <j>(P) has singular reduction. 

Proof. Suppose that E has additive reduction. There is some finite extension 
of K over which E has split multiplicative reduction. So we have 

dv(W n ) = (n 2 - l)r + v l {W' n ) 

for some r. The extension L/K must be ramified [29, Proposition VII. 5. 4], so 
d > 1. The extension needed to obtain (not necessarily split) multiplicative re- 
duction has ramification degree dividing 24 [29, Proofs of Propositions III. 1.7, 
VII. 5. 4(c), A. 1.3, A. 1.4(a)]. To obtain split reduction may require a further 
unramified field extension. Therefore d \ 24. Although E/K may be minimal, 
EjL is no longer. The change of variables required to make it minimal must 
take E to E' having vi(c±(E')) = 0. Therefore, r = dv(c^(E))/4. □ 

10. Integral points 

We begin with some preliminaries about heights. Let h(p/ q) = log max{ \p\, \q\} 
be the usual logarithmic height on Q. The naive height of a point P G E( 
is h(P) = h(x(P)). The canonical height of P is 

h (P) = ~ Um Mfm. 

V ' 2 n^oo 4 n 

This differs by a factor of 2 from the definitions of some authors. 
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Lang, [21, Theorem 2.1], shows that 



< l -h{E) + 0(l). 



2 

The meaning of the notation h(E), the height of E, in the introduction is 

h{E) = h (E) = max{/i(j),log |A|, 1}. 

However, in this section, following Ingram, it is convenient to consider elliptic 
curves in short Weierstrass form, 

y 2 = x 3 + Ax + B, 

with integral coefficients, and to use 

h(E) = h r (E) = max{fc(j),logmax{4|A|,4|£|}}, 

which is always at least 2 log 2. The statement of Theorem 1 is the same no 
matter which height is used, thanks to the following proposition, which says 
the two heights are equivalent. 

Proposition 26. hi(E) x h (E) 

Proof. Note that \X + Y | < 2 max{|X|, \Y\} and max{4|A|, A\B\} > 4. 
h (E) =max{/i(j),log|A|,l} 

< 2max{/i(j),logmax{|4A 3 |, \27B 2 \}, 1} 

< 18 max{h(j), log max{4|A|, 4|5|}} 
= lBh^E) 

For the other direction, 

logmax{4|A|,4|B|} < logmax{|4A 3 |, \27B 2 \} 
< 21ogmax{|4A 3 |, |A|} 
<4max{/i(j),log|A|,l}, 

from which we conclude that hi(E) < 4ho(E). □ 

Lang [21, Conjecture 5] originally stated the Lang-Hall conjecture in terms 
of the height 

h LH (E) = \ogm a x{\A\,\B\} 

and the relationship 

h{P)<C 1 h LH {E) + C 2 . 

One verifies that Hlh{E) < hj(E), that hj(E) > 2 log 2, and much as in 
Proposition 26, one has 

h (E)<C 1 + C 2 h LH (E). 

These facts combine to show the Lang-Hall Conjecture as stated in the intro- 
duction is equivalent to that given in [21]. 

Lang originally stated the Height Conjecture in terms of hu{E) = log |A|. 
Since, hn{E) < ho(E), the conjecture with hu follows from that with ho] 
the conjecture stated in terms of ho is actually a strengthened form (see for 
example [29, Conjecture VIII.9.9]). 
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We are now ready to prove Theorem 1. Ingram's result is as follows. 

Theorem 27 ([17, Theorem 1]). There is an absolute constant C such that 
for all minimal elliptic curves E/Q, and non-torsion points P G E(Q), there 
is at most one value of n > CM(P) W such that [n]P is integral. Furthermore, 
this one value is prime. 

The quantity M(P) depends on P and is related to the Tamagawa number. 
The proof of this result depends on a lemma about valuations of division 
polynomials, restated here. 

Lemma 28 ([17, Lemma 3]). Let E/Q be an elliptic curve in Weierstrass 
form, let P G E(Q) be an integral point of infinite order, and let W n be the 
associated elliptic divisibility sequence. Let D n be the denominator of [n]P. 
Then, for n > 1, 

logD n < log \W n \ < \ogD n + n 2 M{P) 2 log \A E \. 

Ingram's proof of Lemma 28 depends on the results of Cheon and Hahn [3] 
concerning valuations of division polynomials. With the stronger results of 
this paper, we can replace M(P) with a constant independent of the curve 
and point. The improved lemma is the following. 

Lemma 29. Let E/Q be an elliptic curve in Weierstrass form, let P G E(Q) 
be an integral point of infinite order, and let W n be the associated elliptic 
divisibility sequence. Let D n be the denominator of [n]P. Then, for n > 1, 

n 2 

log£>„ < log \W n \ < \ogD n + — log \A E \. 

o 

Ingram's proof of Theorem 27 depends upon M(P) in two places: first, in 
the Lemma we are replacing; and second, in the constant C\ of the bound 

h(P) > Cxh(E) 

of [17, Lemma 5], based on work of Silverman [25] and Hindry and Silverman 
[16]. In our version of Ingram's proof, we simply track the dependence on 
h(P)/h(E) explicitly, and we obtain Theorem 1. If we wish to assume Lang's 
conjecture, the quantity h(P)/h(E) is uniformly bounded below, and all the 
constants become uniform. 

In what follows, we use the main theorems of this paper to prove Lemma 29, 
and then list the modifications to [17] necessary to obtain Theorem 1. It should 
be pointed out that, once the lemma is in place, the remaining modifications 
are straightforward and partially follow unpublished notes of Ingram [18]. 

Proof of Lemma 29. Since P is integral, D n | W n , and so we have the first 
inequality. To prove the second inequality, we assume E is minimal and look 
locally at each prime, and show that 

n 2 

v(W n ) < v(D n ) + —v(A). 

o 

Write 4> n = 4> n (P), \l/ n = ^n(P) = W n . The second inequality is a statement 
about the size of g n = gcd(0 n , \l/ n ). Since E is in minimal form, the quantity g n 
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is supported only on primes for which P has singular reduction [1, Theorem 
A]. In other words, v(g n ) = mm{v(<f) n ),v(ty n )} = for valuation v — v p 
associated to a prime p at which P has non-singular reduction. In this case, 
v{W n ) = v{D n ). 

We consider the reduction type of E case-by-case. 

Suppose E has multiplicative reduction. Since P has singular reduction, 
np > 1. Since £p = v(A), and x(l — x) < 1/4 for < x < 1, 

„ / B x ^ n 2 ap~(£ P -ap) i P n 2 n 2 
Rn{ap,£p) < ^ < -g- = y^( A )- 

We know 

v(W n ) =R n (a,£)+T n , 

where 

_ f v(x([n]P)/y([n]P)) n P \ n \ _ 
±n ~ \ n P \n ] ~ v ^ n > 

as in the proof of Theorem 24. We conclude that 

n 2 

v(W n )-v(D n )<—v(A). 



Consider an isomorphism, <fi : E — )• E' such that 4>(P) = P'. There is a u 
such that A' := A E , = u 12 A, W' n := V n (4>(P),E') = u^^Wn and x(0(P)) = 
u 2 x{P). 

Suppose that E is of additive potential multiplicative reduction. In this 
case, v(A) > —v(J) > 0. We pass to an extension of degree d over which such 
a is defined between E and a minimal E' of multiplicative reduction. From 
Theorem 25, 

dv(W n ) = (n 2 - l)dv(c 4 )/4 + v 1 {W' n ) 



Recall that 
We obtain 
We also have 



3w(c 4 ) = v(j) + v(A) > 0. 
ui(A') = dv{A) - 3dv( Ci ) = -dv{j). 



v{D' n )< v(D n ) + - A dv{c A ). 



Therefore we may compute 

n 2 — 1 1 
dv(W n ) - dv(D n ) < -^dv{c 4 ) + v x {W' n ) - v x {D' n ) + -dv{c A ) 

n 2 n 2 

<^(^(j) + ^(A)) + y ^(A') 

n 2 n 2 
= ^(dv{j) + dv{A))-—dvij) 

n 2 , , n 2 



-dv(j) + —dv(A) 



rr 



< —dv(A) 
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Suppose that E has additive reduction that resolves to good reduction. 
Then, we perform the same sort of computation, but V\{W^} = Vi(D' n ). From 
Theorem 17, 

dv{W n ) = (n 2 - l)dv(A)/12 + ui(W^) 

Then 

n 2 - 1 1 
dv(W n ) - dv(D n ) < —^—dv(A) + Vl (W' n ) - Vl (D' n ) + —dv(A) 

= T2 MA) 

In all cases, we find 

n 2 

v(W n )-v(D n ) < —v(A). 



The lemma, for minimal curves, follows by combining this result for all primes. 

For a curve which is not minimal, we must apply a change of variables 4> for 
some u with v(u) < 0, where E' is minimal. We have 



v{W n ) - v{D n ) < v{W' n ) - (n 2 - l)v(u) - v(D' n ) - v(u) 

< -n 2 v(u) H v(A') 

8 

7% 2 

= -n 2 v(u) + — (v(A) + 12v(u)) 
8 

+ — v(A) 



2 

^ 2 /AN 

< —v(A) 



□ 



Since Ingram considers only short Weierstrass form, he defines quasi-minimal 
to mean a curve with minimal discriminant among short Weierstrass forms 
with integral coefficients. He shows that such a curve has a discriminant di- 
viding 6 12 V where T> is the true minimal discriminant [J 7, Proof of Lemma 
5]. 

The modified lemma results in a modified [17, Proposition 4], which becomes 

Proposition 30. Let E/Q be an elliptic curve in quasi-minimal Weierstrass 
form, let P G E(Q) be an integral point of infinite order, and suppose that 
[n]P is integral, n > 2. Then 

h{P) < logn + 

Proposition 30 only differs from [17, Proposition 4] in that the coefficient of 
h(E) no longer depends on M(P). 

Proof of Proposition 30. The proof is exactly as for [17, Proposition 4], except 
that we assume |x(P)| > 240n 2 exp(3h(E) /2) and use Lemma 29 in place of 
[17, Lemma 3]. The altered proof is included for completeness and because 
part of it is used later. 
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A result of David [6, Lemma 10.1] states that for O 7^ Q G E[n], 

\x{Q)\ < 120n 2 exp(h(E)). 

Suppose that [n]P is an integral point, and that 

\x{P)\ > 240n 2 exp(3/i(£)/2). 

Then, \x(P)\ > 2\x(Q)\, and so \x(P)-x(Q)\ > §|z(P)|, for all O ^ Q G E[n). 
From the definition of division polynomials, 

K = n 2 J] \*{P)-x(Q)\- 

Q£E[n}^{0} 

Therefore, 

21og|^ n | > 21ogn + (n 2 -l)(3/i(P)/2 + 21og72 + logl20) 
On the other hand, by Lemma 29 and the triangle inequality, 

21og|# n | < n 2 h(E). 
Combining these two, for n > 2, we obtain 

> 2n 2 log n + (n 2 - 1) log 120 
which is a contradiction. Therefore, 
(27) \x{P)\ < 240n 2 exp(3/i(P)/2). 

By Silverman [27, Theorem 1.1], for all P G E( 

h(P) - \h{x{P)) 



< 2h{E). 



Since P is integral, h(x(P)) = log|x(P)|. Therefore, 

h(P) < -h(x(P)) + 2h(E) < - log 240 + log n + -h(E) < log n + —h(E) 
2 2 2 2 

since h(E) > 2 log 2. 

□ 

Modifications to the rest of the proof of [17, Theorem 1] consist of the 
following: 

(1) Ingram's [17, Lemma 5] gives a bound C\ for h(P) > C\h(E) which de- 
pends on M(P). Instead of using the lemma and tracking dependence 
on M(P), simply track dependence on C\. Note that throughout the 
proof, the lemma is only used for the fixed point P. In the end we may 
take C x = h(P)/h{E). 

(2) Use Proposition 30 in place of [17, Proposition 4]. 

These need to be applied for [17, Proposition 7, Lemma 9, Proposition 11, 
Lemma 12 and Proposition 13]; this having being accomplished, the constants 
in their statements and proofs are expressed in terms of their dependence on 
C\. Explicitly: 
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(1) [17, Proposition 7.] The constant if we follow Ingram's method of 
proof is Co = max{e 2 , ^pC^ 2 }. However, the estimate comes down to 
[17, Lemma 6], which gives a lower bound on x such that f(x) = 
x 2 — a log(x) — b is positive. In place of this, we can apply this lemma: 

Lemma 31. Let a > be a real number. Let f(x) = x 2 — alogx — a. 
Then f(x) > for x > max{4, y/aloga}. 

Then, we may use cq = max {4, 13C^ log (y^x *) }• 

(2) [17, Lemma 9.] c x = C x /2 and c 2 = y/6/C x . 

(3) [17, Proposition 11.] It now suffices to take 

log B = logVi > 21ogn + llh(E), 

and we can use C = 10 46 . For curves with h(E) > 2tt\/3, we can then 
use C4 = 10 24 C A 1//2 , and choosing any < e < 1, we can use 

C3 = max|c £ ,(l0 24 C- 1/2 ) T ^}. 

where c t is a constant such that logn < n £//3 for all n > c e . For 
example, if e = 1/2, we can take c £ = 10 8 . (Note that In gram makes 
an inconsequential error in computing C3.) 

(4) [17, Lemma 12.] We replace Ingram's equation (10) with our (27), 
which does not depend on M(P). Then we can take C = \f^Jc[ = 

VTo/cl /2 . 

(5) [ I 7, Proposition 13.] We use c 5 = 2/ci = 4/C A and c 6 = max{c , C, K} 
where K is an absolute constant. 

For clarity, we now present the proof of Theorem 1, following [17, Theorem 
1], but using the modified [17, Propositions 7, 11, and 13]. 

Proof of Theorem 1. Let E/Q be a quasi-minimal elliptic curve with an inte- 
gral point P G E(Q) of infinite order. Let C = max{c , c 3 , c 6 , c 7 }, where 

c 7 = yj c 5 log c 4 

By the modified [17, Propositions 11, and 13], for > Co, we have 

n\h(E) < c 5 log n 2 , and n 2 < c 4 /i(i?) 5 / 2 . 
Combining these, we have 

h(E)<^\ogh(E) + ^\ogc 4 . 

Recall that 

c 5 =4/C A , C4 = 10 24 /Cf 

I — 1 /2 

and since ni > c 6 > V10C A , the first constant can be replaced with an 
absolute constant, and since n\ > cj, the second can also. We therefore obtain 
an absolute upper bound 

h(E) < N 
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On those E with h(E) > N, there can be at most one n > Cq such that [n]P 
is integral. Let 

C = sup {n : [n]P is integral from some P G E(Q)}. 

h(E)<N 

The set of h(E) < N is finite and can be effectively computed, if N is known. 
Letting C = max{Co, C }, we have proven the theorem. 

It remains to simplify the constant Co- Considered as a function of x = C^ 1 , 
it is of the form 

C = max{K , K^logx, K 2 x^ l+e \ K 3 x^, K A x^ (logx) 5 }, 

where the Ki are absolute constants. If we increase the constant K sufficiently, 
then since x log x grows fastest (as x increases) among all the functions (which 
are all eventually increasing), we may replace Cq with 

Cq = ma.x{K' , Kixlogx} 

This proves the theorem. □ 



11. Other connections and applications 

11.1. Growth rates of valuations. The main theorems of this paper give 
growth rates of v(W n ). Cheon and Hahn find that for a non-torsion point 
over a number field with singular reduction, the growth rate is quadratic [3]. 
Everest and Ward give more precise growth information in [9, Theorem 3], 
which says that for any E in minimal Weierstrass form and P of singular 
reduction, 

log \9 n {P)\ v = (log IA^/12 + \ V {P)) n 2 + 0(n c ), 

where C < 2 and may depend on P. 

This work also allows computation of the constant coefficient of n 2 . For 
a point of singular reduction on a curve of additive reduction, the constant 
depends on the behaviour of the point when the field is extended to resolve 
the additive reduction; see Theorems 17 and 25, and the examples of Section 
12. 

For multiplicative reduction, the constant is more easily stated. If E is in 
minimal form, then from Theorem 24, Proposition 21 (xiii) , and Proposition 
ll(iii), 

v(W n )=(^^y 2 + 0(lo g n). 

where the meaning of ap and £p is given in Definition 4. In particular, 

< a P < t P = v(A E ). 

Using [28, Theorem VI.4.2(b)], it is immediate to verify that this constant is 
in agreement with Everest and Ward's. 

In all cases (i.e. all types of bad reduction), our theorem improves Everest 
and Ward's result. We have 
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Theorem 32. Let K be a p-adic field, with valuation v, and residue field of 
size Nk- Let E be a minimal elliptic curve over K and let P G E(K) be 
a point with singular reduction. Let W n be the associated elliptic divisibility 
sequence. Then 



Proof. From [9, Theorem 3], all that remains is to show that the error term is 
correct. This follows from Propositions ll(iii) and 21(xiii) and Theorems 8, 
12, 17, 24 and 25. □ 

11.2. Torsion points and Tate normal form. Gezer and Bizim use Tate's 
normal form for an elliptic curve with an iV-torsion point to obtain general 
formulas for EDS of rank N [13]. For example, the general form of a rank 7 
EDS is 

1, -a 2 (a - 1), -a 6 (a - l) 3 , a n (a - l) 6 . . . 
They go on to give the general term as 

Wn = ea^ n2 -^ 7 (a - if™ 2 "*)/ 7 , 

where 

-Hi if n = 1,4,5 (mod 7) 
-1 if n = 2, 3, 6 (mod 7) 

1, 6 (mod 7) ( 3 if n = 1, 6 (mod 7) 

p = { 6 if n = 2, 5 (mod 7) , q = < 5 if n = 2, 5 (mod 7) . 

3, 4 (mod 7) [ 6 if n = 3, 4 (mod 7) 

We can now restate this general term as 

W n = ea R ^ 7 \a-l) R ^ 7 \ 

where e is as above. 




12. Examples 

The examples in this section illustrate the main theorems of the paper de- 
scribing v(W n ), both the usual and unusual. 

Example 33. This example demonstrates non-singular reduction fitting the 
hypotheses of Corollary 15, as well as singular reduction on a curve of mul- 
tiplicative reduction. Consider the elliptic curve in minimal Weierstrass form 
and point 

E : y 2 + xy = x 3 + x 2 - 1652a; + 25168, P = (24, -4), 

having j = -2~ 8 • 7~ 2 ■ ll 3 • 89^ • 7211 3 , A = -2 8 • 7 2 ■ 89, and c 4 = 11 ■ 7211. 

The curve has good reduction at p = 3. The point P reduces to a point of 
order 5. By Corollary 15, 

„ ( W \- I v(W 5 ) + v(n/5) 5\n 
V3{Wn) ~ \ 5{n • 
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The curve has multiplicative reduction at p — 7. The point P reduces to a 
non-singular point of order 6. By Corollary 15, 



v 7 (W n ) 



v(W 6 ) + v(n/6) 6 | n 
6 \n 



The curve has multiplicative reduction at p = 2. The point P reduces to 
the singular point. The smallest multiple of P reducing to the identity is 
[6]P = (4719/196, -56771/2744). In Theorem 24, t P = v 2 (A) = 8. Since [2}P 
has non-singular reduction, P reduces to the component of E(Q 2 ) / E (Q2) 
having order 2, i.e. ap = 4. Using the notations of Lemma 9, h = and 
b = p by Theorem 24. Also, sp = t>2(0([6]P)) = 1 and so j = 0. Furthermore, 
Wp = t; 2 (6([12]P)/0([6]P) 2 ) = 3-2 = 1. Therefore, 

2 + v(n/6) v 6 (n) > 1 
v 2 (W n ) = P n (4,8)+ { 1 v 6 (n) = l . 



6 f n 



The EDS associated to E and P is 



1, 2 4 , 2 8 , 2 16 , 2 24 • 3 • 5, 2 37 • 7, -2 48 , -2 64 ■ 211, -2 80 • 23 ■ 137, . . . 
with valuations, agreeing with the formula? above, of 

v 2 (W n ) : 0, 4, 8, 16, 24, 37, 48, 64, 80, 100, 120, 147, 168, 196, 224, 256, 288, 

325, 360, 400, 440, 484, 528, 580, 624, 676, 728, 784, 840, 901, 960, . . . 

v 3 (W n ) : 0, 0, 0, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 2, 0, 0, 0, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 2, 
0, 0, 0, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 3, 0, 0, 0, 0, 1, 0, 0, 0, 0, 1, . . . 

v 7 (W n ) : 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 1, 
0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 1, . . . 

Example 34. This example describes a point which reduces to the identity, as 
well as a point of singular reduction on a curve of additive, potential good 
reduction. Consider the elliptic curve in minimal Weierstrass form and point 

1 1249 \ 



E : y* = x 3 + 2471a; + 1, P 



5 2 ' 5 3 J 



having j = 2 8 ■ 3 3 ■ 7 3 • 353 3 ■ 60350132471- 1 , A = -2 4 ■ 60350132471, and 
c 4 = -2 4 • 3 • 7 • 353. 

This curve has good reduction at p — 5, but P reduces to the identity. We 
are in the case of Theorem 12, and v^{x{P)) /2 = —1. We have rip = 1. The 
formal group for this elliptic curve has 

[5]T = 5T - 3083808T 5 - 33480T 7 + 1574818510720T 9 + 0(T 10 ) 

Therefore, in Lemma 9, b = 5, and j — h — w — 0. Therefore, from Theorem 
12, we expect 

v 5 (W n ) = -n 2 + l + v 5 (n). 

At p = 2, this curve has additive reduction, but potential good reduction. 
If we extend Q2 by a cube root n of 2 (an extension of ramification degree 3), 
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then E obtains good reduction. The change of coordinates is 

j/ = 1T~ 3 (y + X+l), x' = 7T~ 2 (X+ 1), 

and the new curve (now in minimal Weierstrass form) and point are 

12tt 622 



E' : y + 7i 2 xy + y = x 3 + ttx 3 + 618tt 2 x + 618, P' 



5 3 



The point P' reduces modulo it to the point (0, 0) of order 3 on the reduced 
curve y 2 + y = x 3 over F2. Applying Theorem 12 to W w the elliptic divisibility 
sequence for E' and P', we have rip = 3, sp = v n (Q([3]P)) = 1. The formal 
group for E' has 

[2)T = 2T- tt 2 T 2 - 2tt 2 T 3 + 0(T 10 ) 

so that b = h = 2, v(p) = 3 and so j = in Lemma 9. We have wp = 
^(6([6]P)/6([3]P) 2 ) -hp = 4- 2-1-2 = 0. Therefore, 

fwM _ J l + ^("/3) 3 I n 

By Theorem 17, we have 

3v 2 (W n ) = (n 2 - 1) + = + { 3 _f n/3) ^ . 

The elliptic divisibility sequence for E and P begins 

1, 2 ■ 5~ 3 ■ 1249, -1 ■ 2 3 ■ 5~ 8 • 298135585859, 

- 1 • 2 5 ■ 5~ 15 • 1249 • 460436473420870703, . . . 
and has valuations, agreeing with the formula? above, of 
v 2 {W n ) : 0, 1, 3, 5, 8, 13, 16, 21, 27, 33, 40, 50, 56, 65, 75, 85, 96, 109, 120, 133, 
147, 161, 176, 195, 208, 225, 243, 261, 280, 301, 320, 341, 363, 385, 
408, 434, 456, 481, 507, 533, 560, 589, 616, 645, 675, 705, 736, 772, . . . 
v 5 {W n ) : 0, -3, -8, -15, -23, -35, -48, -63, -80, -98, -120, -143, -168, 

- 195, -223, -255, -288, -323, -360, -398, -440, -483, -528, 

- 575, -622, -675, -728, -783, -840, -898, -960, -1023, . . . 

Example 35. This example showcases a non-integral torsion point. Consider 
the elliptic curve, in minimal Weierstrass form, and point 

E : y 2 + xy + y = x 3 + x 2 - 135x - 660, P = (-29/4, 25/8) 

The discriminant is A = 3 8 ■ 5 2 . The point P reduces modulo 2 to the identity. 
Therefore, Theorem 12 applies, with np = 1. We have v(x(P)) = —2, so 
sp = 1, and in the formal group, we have 

[2)T = 2T — T 2 — 2T 3 - 6T 4 + 0(T 5 ) 

so that bp = 2, hp = 0, j = and wp = 00 (since [2}P is the identity on E). 
We obtain 



v(W n ) = -n 



2 



00 2 I n 

1 2\n 
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The elliptic divisibility sequence for E and P begins 

1 . n -?r s ■ a 8 , n ?r 2A ■ 3 24 n -?r 4S . 3 48 



and has valuations, agreeing with the formula above, of 
v 2 {W n ) : 0, oo, -8, oo, -24, oo, -48, oo, -80, oo, -120, oo, -168, oo, -224, . . . 

Example 36. This example illustrates singular reduction on a curve of potential 
multiplicative reduction. Consider the curve, in minimal Weierstrass form, and 



E : y 2 + 49y = x 3 + Ux 2 - 312352901x + 2123335052286, P = (10206, 1176). 

Modulo 7, the point P reduces to the cusp (0, 0) on the reduced curve, 
y 2 = x 3 (additive reduction). If we pass to a ramified quadratic extension 
of Q7, say by adjoining a square root ir of 7, then the change of coordinates 
x' = ir~ 2 x, y' = Tc~ 3 y gives a minimal Weierstrass equation, 

E' : y 2 + iry = x 3 + 2x 2 - 6374549x + 6190481202, P' = (1458, 24vr). 

having v n (j) = —10, v n (A) = 10, v n (c^) = 0. Therefore, this curve has mul- 
tiplicative reduction. The point P' reduces to the node (2, 0) on the reduced 
curve y 2 = x 3 + 2x 2 + x + 3. We have £p = v n (A) = 10. The points P 
and [3}P reduce to the node, while [2]P reduces to the point (1, 0) of order 2; 
[4]P reduces to the identity. Therefore rip = 4. By Theorem 24 (i), ap = 5. 
Alternatively, ap must have order 2 in Z/£pZ, so it must be ap = 5. Using 
the notations of Lemma 9, b = p and h = by Theorem 24. We can compute 
sp = v(Q([A]P)) = 1, which tells us that j = and wp = 0. Gathering 
together these parameters, we obtain the sequence of valuations for W n , the 
EDS associated to E' and P'\ 



and has valuations, agreeing with the formula above, of 

v 7 (W n ) : 0, 4, 9, 18, 27, 40, 54, 72, 90, 112, 135, 162, 189, 220, 252, 288, 324, 364, 
405, 450, 495, 544, 594, 648, 702, 760, 819, 883, 945, 1012, 1080, 
1152, 1224, 1300, 1377, 1458, 1539, 1624, 1710, 1800, 1890, 1984, . . . 

Example 37. This example of potential good reduction exhibits very unusual, 
complicated behaviour. In particular, we have an example with j ^ in 
Lemma 9. Let K = Q 2 , and R be its ring of integers. Let a = y/Tf E R*. 
Then the curve 



point 




By Theorem 25, we have 





E : y 2 = x 3 + ax + a + 2 
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has j = 2 8 + 2 10 + 2 14 + 2 17 + 0(2 19 ) e R, so E has potential good reduction. 
It is a minimal Weierstrass equation since v 2 (A) = 4 < 12. It has additive 
reduction, since v 2 (c4) = 4 > 0. 
The reduced curve over F2 is 

E : y 2 = x 3 + x + 1 

which has a cusp at (1, 1). 

Let (3 2 = (-17) 3 + a(-17)+a + 2. Then (3 G P*. Let P = (-17, /5) G 
The point P has singular reduction to the cusp (1,1), but [2]P reduces to the 
non-singular two-torsion point (0, 1). 

We have to pass to a ramified extension L/Q 2 to obtain good reduction for 
E, which will guarantee non-singular reduction for P. It will suffice to change 
coordinates to Deuring normal form, 

Ed '■ y 2 + axy + y = x 3 

The change of coordinates required is 

x = u 2 x' + r, y = u 3 y' + u 2 sx + t 

where q = s — 1 is a root of the irreducible polynomial 

p( x ) = ( x + l) 8 + 18a (a; + l) 4 + 108(a + 2){x + l) 2 - 27a 2 , 

whose constant term, do = 217 + 126a — 27a 2 , has valuation v 2 (a ) = 2. 
Therefore q is not a uniformizer (since the polynomial is not Eisenstein), but 
it has positive valuation. Let N = Q.2(s) have valuation = dv 2 where d is 
the ramification degree of iV over Q 2 . Since VN(p(q) — q 8 — ao) > vn(clo) = 2d 
(all the intermediate terms of the polynomial are divisible by 4x), we find that 
8v]y(q) = 2d, i.e. fjv(g) = d/4. Hence the extension is totally ramified (d = 8), 
and t>7v(s — 1) = 2. 

We also have u 3 = (a + s 4 /3)/s G Q 2 (s). We can compute the valuation of 
3a + s 4 in N as follows. We have 

3a = (1 + 2)(1 + 2 3 + 0(2 5 )) = 1 + 2 + 2 3 + 0(2 4 ) 

Meanwhile, 

s 4 = 1 + 4g + 6q 2 + 4g 3 + q 4 . 

So, v(3a + s 4 ) = 8. Therefore, vn(u 3 ) = 8. Hence, u generates a totally 
ramified extension L of degree 3 over N = Q 2 (s). Therefore, [L : Q 2 ] = 24. 
We have r = s 2 /3 and t = u 3 /2. Finally, a = 2s/u. 

The Deuring normal form is a minimal Weierstrass equation of good reduc- 
tion. (We could also verify that Vl(u) = 8 since v L (A E ) = 24v 2 (A E ) = 96 and 
so = v L (A En ) = v L (u- l2 A E ) = v L (A E ) - 12v L (u) = 96 - 12v L (u). We also 
find that Vl(o) = 24 + vl{s) — vl(u) = 16, so a is an integer, which confirms 
that Ed has good reduction.) 

Let : E — > Ed represent the change of coordinates to Deuring normal 
form. Then, 

v(x(4>(P))) = v L {17 + s 2 /3) - 2v L (u) = 12 - 16 = -4. 
The EDS W' n associated to the curve Ed and point Pd = <j>{P) satisfies 
v L (W^) = 24v 2 (W n )-8(n 2 -l) 
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and is associated to a point of non-singular reduction. In fact, Pjj reduces to 
the point at infinity and has v(x(Pd)) = —4. Thus, the sequence 

v L {W' n ) + 2n 2 = 2Av 2 {W n ) - 8(n 2 - 1) + 2n 2 

must be of the form S n (p,t,d,h,s,w) as in Lemma 9. Multiplication-by-2 in 
the formal group for Ejj begins 

[2]T = 2T- aT 2 + (1 + a)T 4 

and since vl(o) = 16, we get b = 4 in Lemma 9, and so we have t = 2, 
c = 2, j = 1 and w = 6 in Definition 2. The sequence vl(W^) — 2n 2 = 
5 n (2,2,24,0,2,6) is 

2, 8, 2, 32, 2, 8, 2, 56, 2, 8, 2, 32, 2, 8, 2, 80, 2, 8, 2, 32, 2, 8, 2, 56, 

2, 8, 2, 32, 2, 8, 2, 104, 2, 8, 2, 32, 2, 8, 2, 56, 2, 8, 2, 32, 2, 8, 2, 80, 

2, 8, 2, 32, 2, 8, 2, 56, 2, 8, 2, 32, 2, 8, 2, 128, 2, 8, 2, 32, 2, 8, 2, 56, 

2, 8, 2, 32, 2, 8, 2, 80, 2, 8, 2, 32, 2, 8, 2, 56, 2, 8, 2, 32, 2, 8, 2, 104, 2, 8, 2, . . . 

Now let us verify this directly. The first few terms of the elliptic divisibility 
sequence associated to E and P are 

1, 2(3, -a 2 + 1530a + 250155, 

- 4/3a 3 - 5540/3a 2 + 1277796/fo + 95764068/3, . . . 

or 

1, 2 + 2 6 + 2 9 + 2 11 + 2 12 + 2 13 + 2 16 + 2 18 + 0(2 19 ), 

2 2 + 2 5 + 2 7 + 2 8 + 2 10 + 2 11 + 2 12 + 2 14 + 2 17 + 0(2 19 ), 
2 s + 2 7 + 2 9 + 2 10 + 2 12 + 2 13 + 2 15 + 2 16 + 2 18 + 0(2 19 ) . . . 
The valuations v^iWn) are, 

0, 1, 2, 5, 6, 9, 12, 18, 20, 25, 30, 37, 42, 49, 

56, 67, 72, 81, 90, 101, 110, 121, 132, 146, 156, ... 

These are exactly equal to 

1 ( 8 ( n 2 _ !) _ 2n 2 + S n (2, 2, 24, 0, 2, 6)) . 
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